Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/afe3169b-7fd4-317d-a3ae-449200294914.roa
File:                     afe3169b-7fd4-317d-a3ae-449200294914.roa (raw, json)
Hash identifier:          eI3UN+rbwPRU35BC8qWqm7Q72rhET3QByyx+ohbNa3g=
Subject key identifier:   E1:3A:64:01:1E:39:76:F0:40:2B:07:47:F2:3B:6B:59:D5:58:97:CD
Certificate issuer:       /CN=d03866eb-6362-4657-aa66-83307258d945
Certificate serial:       010D0C9F4328583CF94B7035CA862B71556AE140
Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/afe3169b-7fd4-317d-a3ae-449200294914.roa
Signing time:             Tue 08 Jun 2021 04:00:00 +0000
ROA not before:           Tue 08 Jun 2021 04:00:00 +0000
ROA not after:            Thu 23 May 2024 04:00:00 +0000
asID:                     43350
IP address blocks:        192.101.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f9:4b:70:35:ca:86:2b:71:55:6a:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03866eb-6362-4657-aa66-83307258d945
        Validity
            Not Before: Jun  8 04:00:00 2021 GMT
            Not After : May 23 04:00:00 2024 GMT
        Subject: CN=124a024d-736b-4692-86ac-5a4f8451cd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b1:6f:1a:40:90:5d:83:8c:ca:35:e2:03:29:
                    2d:49:43:2f:de:52:95:ee:c6:8f:09:99:47:6e:33:
                    fe:07:11:ab:b8:5a:e3:c0:75:bb:28:e6:6b:b3:93:
                    09:10:1c:23:30:16:ad:13:0f:fe:19:89:99:57:bd:
                    8d:d6:e9:03:fb:d4:4b:80:56:70:b9:e9:c0:85:59:
                    7b:88:27:4e:12:04:09:60:5c:90:04:0d:7c:60:2e:
                    7b:de:7c:93:3c:f2:de:21:2c:e8:05:e4:39:ab:fc:
                    a5:af:77:bf:65:8e:9f:43:a2:f4:7b:b6:de:59:00:
                    bc:3e:59:21:93:3f:df:0a:89:38:b7:53:6a:9a:cb:
                    0c:8f:1d:b2:fa:b3:d2:07:1f:f4:a9:00:6a:df:fd:
                    84:b6:9c:2c:04:7b:7b:98:6a:d1:fc:ed:ff:92:12:
                    73:9b:da:5a:00:cb:a5:64:55:f0:93:5a:83:11:db:
                    a9:01:54:bd:64:e3:14:dd:3c:d0:10:d3:b6:f0:2d:
                    d5:a2:08:65:83:28:73:48:06:41:05:e9:c5:a9:b2:
                    af:5b:2a:fd:08:a5:d2:91:1a:d7:fe:ff:31:92:08:
                    16:8a:ce:9d:a3:e2:e5:4c:54:91:36:8e:2b:b8:42:
                    8e:a1:8b:a1:90:ce:eb:a3:8d:a8:56:2f:fc:14:dc:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3A:64:01:1E:39:76:F0:40:2B:07:47:F2:3B:6B:59:D5:58:97:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/afe3169b-7fd4-317d-a3ae-449200294914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl

            X509v3 Authority Key Identifier:
                keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:00:09:aa:04:54:c3:4b:a4:8b:8b:55:76:32:26:d8:e9:
         83:57:c6:37:4a:df:97:4b:da:c1:43:08:6e:5e:d5:e7:1c:e7:
         b5:13:7f:b7:b5:0c:1c:bf:e8:46:de:a8:bf:e8:a1:9d:aa:0c:
         15:2c:39:6c:e0:00:d9:96:92:aa:46:ba:c1:c4:fa:02:dd:de:
         54:2f:e7:5f:e0:83:ab:a5:8a:32:77:2e:78:e4:1b:0c:c0:b7:
         f0:84:e8:23:71:a2:98:d1:39:3a:1c:72:20:af:47:72:2c:a0:
         d0:0d:42:66:a1:fe:6f:82:e5:01:3c:34:b9:f1:8e:12:c4:c2:
         3f:f9:06:c3:f8:b8:b3:21:03:72:ce:28:05:75:03:15:ca:c6:
         f5:1f:0f:9e:f7:db:f0:b7:70:50:f0:75:c3:ef:ef:42:79:c1:
         40:72:f2:23:40:de:b0:e1:f4:b5:f9:6a:2a:a4:78:41:ad:9d:
         80:2b:b7:95:47:01:69:b1:59:b5:d2:da:ab:92:28:a5:4a:11:
         a0:d0:4b:2f:90:34:f5:5a:e7:93:4e:6b:eb:9f:98:63:bf:e0:
         77:8d:0a:85:e3:73:95:26:00:69:3c:67:f7:58:de:55:7c:aa:
         21:4c:db:3b:2c:2c:f1:34:9f:c9:10:9b:c4:e8:84:63:b1:b7:
         4e:47:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----